Professional Documents
Culture Documents
UM AirAccess
UM AirAccess
Email: sales@spirent.com
Web: http://www.spirent.com
All of the company names and/or brand names and/or product names referred to in this document, in particular, the
name “Spirent” and its logo device, are either registered trademarks or trademarks of Spirent plc and its
subsidiaries, pending registration in accordance with relevant national laws. All other registered trademarks or
trademarks are the property of their respective owners.
The information contained in this document is subject to change without notice and does not represent a
commitment on the part of Spirent. The information in this document is believed to be accurate and reliable;
however, Spirent assumes no responsibility or liability for any errors or inaccuracies that may appear in the
document.
Safety Summary
If the equipment is used in a manner not specified by the manufacturer the protection provided by the
equipment may be impaired.
Safety Symbols
The following safety symbols are used throughout this manual and may be found on the instrument.
Familiarize yourself with each symbol and its meaning before operating this instrument.
Instruction manual symbol. The product Frame terminal. A connection to
is marked with this symbol when it is the frame (chassis) of the
necessary for you to refer to the equipment which normally
instruction manual to protect against includes all exposed metal
damage to the instrument. structures.
Protective ground (earth) terminal. Used The caution sign denotes a hazard.
to identify any terminal which is It calls attention to an operating
intended for connection to an external procedure, practice, condition or
protective conductor for protection the like, which, if not correctly
against electrical shock in case of a performed or adhered to, could
fault, or to the terminal of a protective result in damage to or destruction
ground (earth) electrode. of part or all of the product or
data.
Indicates dangerous voltage (terminals Alternating current (power line).
fed from the interior by voltage
exceeding 1000 volts must be so
marked).
Résumé des règles de sécurité
Si le matériel est utilisé d’une façon non conforme aux spécifications du constructeur, la protection assurée
par le matériel peut être mise en défaut.
Symboles de sécurité
Les symboles suivants sont utilisés dans tout le manuel et peuvent être trouvés sur le matériel. Il est
recommandé de se familiariser avec chaque symbole et sa signification avant de manipuler le matériel.
Symbole « manuel d’instruction ». Ce Masse. Ce symbole identifie une
symbole apparaît sur le produit lorsqu’il connexion au châssis du matériel
est nécessaire de se référer au manuel (ce châssis inclut normalement
d’instruction pour éviter une toutes les structures métalliques
détérioration du matériel. exposées).
Terre : ce symbole identifie la connexion Ce symbole désigne une opération
de terre chargée de protéger le matériel ou une condition dite « sensible »,
contre les chocs électriques. Cette qui, si elle n’est pas correctement
connexion doit être raccordée vers un réalisée, pourrait entraîner de
conducteur externe de protection ou vers sérieuses détériorations au
une électrode de type terre. matériel ou aux données
utilisateur.
Ce symbole indique un voltage Courant alternatif (ligne de
dangereux (connexion alimentée en puissance).
interne par un voltage excédant 1000
volts).
Table of Contents
1. Introduction .......................................................................................... 1
1.1. Overview ........................................................................................... 1
1.1.1. Product Highlights................................................................................... 1
1.1.2. AirAccess Applications ............................................................................. 3
1.2. Theory of Operation ........................................................................... 3
1.2.1. Base Station to Mobile Station Network Model ......................................... 3
1.2.2. AirAccess Network Model ......................................................................... 4
2. System Setup ........................................................................................ 5
2.1. Overview ........................................................................................... 5
2.2. System Components .......................................................................... 5
2.2.1. AirAccess C2K Application Software ......................................................... 6
2.2.2. SR3452 V2 CDMA Network Emulator ......................................................... 8
2.2.3. SR3462 1xEV-DO Network Emulator .......................................................... 9
2.3. Installation ...................................................................................... 10
2.4. Logging onto the System Controller PC ............................................. 10
2.5. Software Setup ................................................................................ 11
2.5.1. Initial Software Installation ..................................................................... 11
2.5.2. Copy Protection ...................................................................................... 11
2.5.3. Application Software Updates ................................................................ 12
2.5.4. Configuring AirAccess for Data Testing ....................................................13
2.6. Accessing the AirAccess User Manual ............................................... 14
3. Using AirAccess .................................................................................. 15
3.1. Overview ......................................................................................... 15
3.2. Powering on the Instruments ............................................................ 15
3.2.1. Powering-on AirAccess C2K with Multiple SR3452 V2s ............................. 15
3.3. Starting the Software ....................................................................... 16
3.4. Configuring the Test Instruments ...................................................... 16
3.4.1. RF Insertion Loss .................................................................................... 18
3.5. Loading a Pre-defined Configuration ................................................. 18
ii | AirAccess C2K User Manual
1.1. Overview
AirAccess CDMA Network Emulation is a scalable performance analysis solution for
CDMA 1X, 1xEV-DO, and eHRPD terminal manufacturers and service providers. AirAccess
combines powerful application software with a high-speed protocol processing engine to
provide complete emulation of a multi-cell CDMA networks.
AirAccess provides dynamic emulation not found in one-box radio test sets or program-
driven conformance test systems currently available. This network emulation is essential
to support a broad range of applications, including TIA/EIA-98 Minimum Performance
Standards for CDMA2000, TIA/EIA-898 and TIA/EIA-1043 Signaling Conformance Tests
for CDMA2000, TIA-866A Minimum Performance Standards for 1xEV-DO, TIA-919B
Signaling Conformance Tests for 1xEV-DO, and C.S0095 E-UTRAN CDMA 2000
Connectivity tests for eHRPD.
Powerful user interface for easy test scenarios creation, without test script
generation or software programming.
Essential to the successful launch of a commercial mobile is its ability to perform overlay
services. These features are above and beyond the basic air interface (call processing)
defined in IS-95 or IS-2000. While call processing is essential, it is the overlay services
that are marketable to a consumer.
Instrument API for automated TIA/EIA-98, TIA/EIA-898 (CDG Stage 2) and Location-
Based Services test solution integration.
The C2K Automatic Test System (C2K-ATS) provides an integrated test solution for
evaluating performance of CDMA mobile devices. AirAccess is an integral part of C2K-
ATS, providing the advanced network emulation required for TIA/EIA-98, TIA/EIA-898
(CDG Stage 2) and Location-Based Services testing. The TASKIT/C2K Test Executive
software automates mobile testing by controlling AirAccess through an Instrument API,
stepping through the test sequences, and logging the results. This same Instrument API
is available to generate custom automated test cases.
The SR3452 V2 contains flexible RF converters that provide frequency coverage from 400
to 2700 MHz. This allows testing within all band classes defined by IMT-2000. When the
SR3452 V2 with Internal RF is used, the AirAccess system supports Band Classes 0
(North American Cellular), 1 (North American PCS), 3 (JTACS), 4 (Korean PCS), 5 (NMT), 6
(IMT), 10 (Secondary 800 MHz), 14 (US PCS 1.9 GHz), and 15 (AWS).
Included in AirAccess is the emulation of network entities, such as a PSDN (packet Data
Serving Node), Home Agent, Foreign Agents, and an AAA server for 1X/EV-DO packet data
calls and PDN-GW, HSGW, 3GPP AAA Server for eHRPD packet data calls. The availability
and configurability of these components provides the ability to test the packet data
capabilities of the mobile terminal in a Mobile IP network or Proxy Mobile IP network for
eHRPD. Over-the-air exchange of MN-HA and MN-AAA authentication keys is also
supported with built-in Dynamic Mobile IP Key Update (DMU) functionality.
Chapter One: Introduction | 3
• Product Development
• Design Verification
• Product Qualification
• Conformance Test
• Competitive Analysis
• Performance Analysis
2.1. Overview
AirAccess CDMA Network Emulation provides an integrated test solution for evaluating
second and third generation CDMA mobile units and/or 1xEV-DO access terminals. By
combining network emulation available via advanced software with a physical interface
provided via scalable hardware, AirAccess provides a highly configurable and powerful
system for emulation of an entire CDMA network air interface.
The following chapter explains the steps required to configure your AirAccess system:
The major components of an AirAccess C2K system with two channel (CDMA Only) RF
conversion include:
The major components of an AirAccess 1xPLUS (CDMA and EV-DO) system include:
The major components of an AirAccess 1x/EV-DO system with one (CDMA or EV-DO) RF
conversion include:
The AirAccess C2K software is a Windows-based application that provides the ability to
configure and control a wide range of emulated wireless network infrastructure
components within an easy-to-use GUI. AirAccess complements this flexibility with a
real-time Message Analyzer, Test Results Log, and File Cabinet for fast retrieval of stored
configuration files and test logs. The AirAccess C2K window is shown in Figure 2-1.
Chapter Two: System Setup | 7
At the center of the AirAccess C2K window is a graphic showing the network AirAccess is
emulating. A series of icons represent which infrastructure components are in the
emulated network. From this view, you can see which BSCs and BTSs are activated, and
the sectors that are communicating with the Mobile Station under Test. Each icon
provides an access point for configuring the network components (for example, the
overhead message on a per BTS basis) and launching network-initiated procedures (for
example, an SSD Update).
AirAccess C2K application software simplifies the testing process by providing GUI
driven:
The SR3452 V2, shown in Figure 2-2, provides the core emulation of a CDMA network.
Use the SR3452 V2 in a single instrument configuration or a dual instrument
configuration. When used in the single instrument configuration, the SR3452 V2
emulates one BSC on a single RF carrier. In a dual instrument configuration, a second RF
carrier is available to allow emulation of a second BSC. In either case, up to six
independent sectors are emulated. Each of these sectors can provide a full complement
of code channels.
The front panel of the SR3452 V2 includes a set of LED indicators that display the status
of the instrument.
STATUS
INTERFACE CHANNEL SYSTEM
A single SR3462 provides emulation of multiple 1xEV-DO sectors. The SR3462 interfaces
with the access terminal under test through the RF converters embedded with SR3452
V2 CDMA Network Emulator. The SR3462 connects to the primary SR3452 V2 through a
high-density digital connection.
The front panel of the SR3462 includes two LED indicators to provide a quick reference to
the status of the equipment. The Emulator LED indicates the state of the SR3462. It
flashes while the emulator is initializing. If it is green, the emulator is ready for use. If it
is red, the emulator failed to initialize correctly.
The Controller LED illuminates when the emulator is communicating with the AirAccess
C2K software running on the system controller PC.
10 | AirAccess C2K User Manual
The rear panel of the SR3462 provides I/O connections, including Ethernet and 1xEV-DO
digital baseband signals.
2.3. Installation
Refer to the Setup Guide for your test system for instructions on cabling your AirAccess
instruments.
NOTE: When logged onto Windows with this administrative account, it is possible to
create additional user accounts. These user accounts are used for regular execution
of AirAccess applications. However, when installing new or updated AirAccess
software, it is necessary to log back onto Windows with administrative privileges to
perform the installation.
WARNING: AirAccess releases prior to 4.00 are incompatible with Windows XP SP3.
AirAccess releases prior to 4.00 are incompatible with Windows 7.
Legacy AirAccess version 2.xx applications should not be installed on Windows XP
SP3 systems.
A new AirAccess System Controller PC comes delivered with the password already
entered into the AirAccess application software. However, if a reinstallation or upgrade is
required, you must re-enter the password.
1. Attach the hardware key (dongle) enclosed with your instruments to the parallel port
on the rear panel of the AirAccess System Controller PC.
2. Launch AirAccess by clicking the AirAccess C2K 4.xx desktop icon.
3. Select Enter Application Password from the Help menu.
4. In the Application Password window, enter the AirAccess password from the
Password Certificate.
12 | AirAccess C2K User Manual
5. After entering the password, verify the indicated available options in the Available
Modules window.
6. Click OK to save the password.
NOTE: When updating AirAccess, it is necessary to log onto the machine with
administrative privileges. Use this same login ID when running AirAccess as part of
the registry unique to the particular user ID.
1. Prior to installing the updated version of AirAccess, first uninstall any previous 3.xx
or 4.xx versions of AirAccess:
a. Select the Windows Start menu, then select Settings>Control
Panel>Add/Remove Icons.
b. In the Add/Remove Programs window, select the AirAccess 3.xx or 4.xx
application and click the Remove button.
2. Place the AirAccess CD in the CD drive of the System Controller PC:
Chapter Two: System Setup | 13
a. From the Windows Start Menu, select Run, and enter D:\AirAccess C2K
\setup.exe in the text box.
b. Click OK. (If your CD Drive is not D, substitute the appropriate drive letter)
3. The install program guides you through the rest of the installation process:
a. At the InstallShield Welcome window, click the Next button.
b. After reading the Spirent License Agreement, select I accept the terms in the
license agreement and click the Next button.
c. Fill in the User Name and Organization fields as appropriate for your
installation.
Ensure that the Anyone who uses this computer option is selected.
Click the Next button.
d. In the Setup Type window, select Complete and click the Next button.
e. In the Ready to Install the Program window, click the Install button.
4. Setup copies the necessary files. If a previous version of AirAccess was installed, you
may be warned about replacing existing files. It is okay to replace the existing files.
5. If the setup program detects that certain system files must be updated to proceed, a
message displays.
To install the software on your computer, click the OK button and allow the setup
program to update your system files.
6. Click the Finish button to complete the installation.
7. After installation, Setup may inform you that your computer must be restarted.
8. When your computer has finished restarting, run the newly installed AirAccess.exe.
To update instrument firmware, select File>Install Instrument Firmware.
After the firmware update completed, the AirAccess update is complete.
6. Select Use the following IP address and enter the following values:
IP address: 192.168.0.5
Subnet mask: 255.255.255.0
Default gateway: 192.168.0.1
7. Select Use the following DNS server addresses and enter a DNS server available
on your company network in the Preferred DNS Server field.
8. Click OK to exit the Internet Protocol (TCP/IP) Properties window.
9. Click OK to exit the Local Area Connection Properties window.
10. Click Close to exit the Local Area Connection Status window.
11. Close the Network and Dial-up Connections window.
3.1. Overview
The following chapter provides the instructions necessary to start the AirAccess software
and establish basic communications with the Mobile Station under Test.
NOTE: Timing within the AirAccess system is critical for successful operation. It is
necessary to follow the startup procedure documented below each time the system
is powered on to ensure proper initialization.
Launch the AirAccess C2K software by clicking the AirAccess C2K 4.40 shortcut on the
desktop.
From the AirAccess C2K application menu, select Instrument>Enter Configuration. The
Instrument Setup window displays, as shown in Figure 3-1.
Use the arrow buttons to select the configuration of AirAccess instruments that match
your test system. When finished, click the Next button.
Figure 3-2 shows how the mobile device is connected to the CDMA network emulator.
Chapter Three: Using AirAccess | 17
After completing the data entry, click the Finish button to save the instrument
configuration information.
Dual IS-2000 BSCs w/ 3 BTS, Dual PDSN – In this configuration, AirAccess C2K
provides two IS-2000 BSCs, each capable of providing up to three BTS’s. Each of
the BSCs also supports IS-95A/B and J-STD-008 protocols. A separate PDSN is
implemented for each BSC, thus enabling inter-PDSN handoffs.
Single IS-2000 BSC w/ 6 BTS – In this configuration, AirAccess C2K provides a
single IS-2000 BSC, which provides up to six BTS’s. This BSC also supports IS-
95A/B and J-STD-008 protocols.
4. An AirAccess 1xPLUS system that utilizes two SR3452 V2 and SR3462 provides the
following configurations in addition to 2 and 3:
IS-2000 BSC and IS-856 AN - In this configuration, AirAccess 1xPLUS provides
one IS-2000 BSC and one 1xEV-DO sector. The IS-2000 BSC provides up to 3
BTSs, and also supports IS-95A/B and J-STD-008 protocols. The 1xEV-DO sector
generated by the SR3462 is configurable to support either EV-DO Rev0 or EV-DO
RevA protocols.
IS-2000 BSC and IS-856 AN, Dual PDSN - In this configuration, AirAccess
1xPLUS provides one IS-2000 BSC and one 1xEV-DO sector. The IS-2000 BSC
provides up to 3 BTSs, and also supports IS-95A/B and J-STD-008 protocols. The
1xEV-DO sector generated by the SR3462 is configurable to support either EV-DO
Rev0 or EV-DO RevA protocols. A separate PDSN is emulated for the BSC and the
AN, enabling inter-PDSN handoff testing.
IS-856 AN with 2 DO sectors – In this configuration, AirAccess 1xPLUS provides
two 1xEV-DO sectors. The 1xEV-DO sectors generated by the SR3462 are
configurable to support either EV-DO Rev0 or EV-DO RevA protocols.
TIA-856-B AN with 1 DO sector – In this configuration, AirAccess 1xPLUS
provides single 1xEV-DO RevB sector. The 1xEV-DO sector generated by SR3462
supports two carrier EV-DO RevB protocols.
5. An AirAccess system that utilizes a three SR3452 V2 and SR3462 provides the
following configuration in addition to 4:
IS-2000 BSC and TIA-856-B AN - In this configuration, AirAccess 1xPLUS
provides one IS-2000 BSC and one 1xEV-DO RevB sector. The IS-2000 BSC
provides up to 3 BTSs, and also supports IS-95A/B and J-STD-008 protocols. The
1xEV-DO sector generated by SR3462 supports two carrier EV-DO RevB protocols.
IS-2000 BSC and TIA-856-B AN, Dual PDSN – In this configuration, AirAccess
1xPLUS provides one IS-2000 BSC and one 1xEV-DO RevB sector. The IS-2000
BSC provides up to 3 BTSs, and also supports IS-95A/B and J-STD-008 protocols.
The 1xEV-DO sector generated by SR3462 supports two carrier EV-DO RevB
protocols. A separate PDSN is emulated for the BSC and the AN, enabling inter-
PDSN handoff testing.
Select one of the configurations from the drop-down menu at the top of the Test
Configuration window in AirAccess, as shown in Figure 3-5.
Chapter Three: Using AirAccess | 21
NOTE: The SR3452 V2 Emulator LED indicator must be Steady Green before
attempting to connect to the instruments. If applicable SR3462 Emulator LED
indicator must also be Steady Green.
If the SR3452 V2 Emulator LED is not steady green, or this connection fails, verify the
following:
NOTE: The mobile station may not acquire CDMA service if it is not programmed to
acquire service on the channel/SID/NID combination indicated by the selected
AirAccess configuration file. The mobile station’s Preferred Roaming List (PRL) may
need to be updated to match the selected configuration file.
After the mobile station has acquired CDMA service from AirAccess, you must identify the
mobile station to AirAccess using a mobile station Access Channel message. In this
case, a mobile station registration is used.
Populated Fields
Indicate Successful
Registration
When the call is established, the AirAccess Test Configuration window indicates a call is
in progress, as shown in Figure 3-7. To end the call, select Call>End Call.
4.1. Overview
The AirAccess C2K software provides a feature-rich application capable of performing
advanced CDMA testing. This section is designed to introduce the more advanced
features of AirAccess C2K.
The File Cabinet displays Test Configuration Files (.tcf) and Test Session Logs (.mdb)
stored in the main AirAccess directory and associated subdirectories. AirAccess comes
installed with existing subdirectories for the Test Configuration Files and Test Session
Logs. However, there is no limitation on modifying this directory structure to meet testing
needs.
26 | AirAccess C2K User Manual
Each icon has associated functionality that is accessed by either left and/or right mouse
clicks. The following paragraphs describe the available functionality.
• PN offset
• Sector power
• Parameters within overhead messages
• Enable or disable transmission of optional overhead messages
• Relative code channel gains
• Code channel Walsh codes
• Enable or disable the Quick Paging Channel
• Quasi-Orthogonal Function index (when QOF enabled at BSC)
• Add or remove a sector to/from soft handoff (dependent on current call state)
• Configure and trigger hard handoffs
Each BTS is configured independently. This means a change made at one BTS does not
affect the configuration of another BTS.
NOTE: Some features and messages displayed in the Configure BTS window are
dependent upon the protocol selected in the parent BSC configuration. When the
TSB-74, J, STD, 008 or IS-95B protocol is selected, features and messages non-
existent in these protocols are disabled.
Access the Configure BTS window by clicking the BTS icon, or selecting
Network>Configure Network Element>BTS. The Sector #1 tab, shown in Figure 4-3,
allows you to configure the PN offset, sector power, and overhead messages.
28 | AirAccess C2K User Manual
In the Configure Sector section, you can enter the PN Offset and Sector Power (in dBm).
To change the PN offset, Call Processing must be disabled. If Call Processing is not
disabled, the PN Offset entry box will be disabled. To stop call processing, select
Call>Stop Call Processing.
In the Configure Overhead Messages section, you can configure the following
parameters:
In the Overhead Message Options section, the transmission of overhead messages not
required by the CDMA specification can be enabled or disabled.
Chapter Four: Advanced Features | 29
The following overhead messages are optional and their transmission can be enabled by
selecting the box next to their name:
NOTE: When Band Class 0 is in use at a BTS, that BTS will automatically transmit
the Neighbor List Message in the overhead message train. When Band Class 1 is in
use at a BTS, that BTS will automatically transmit the Extended Neighbor List
Message in the overhead message train.
In the Overhead Channel Gains section of this window, the relative powers of the
common code channels within a sector are entered (in dB). In the F-FCH Gain section,
initial and min/max relative power settings (in dB) are specified for this dedicated code
channel. The min/max range settings define the extremes to which Fast Forward Power
Control (FFPC) can change the relative power levels of the dedicated channels during a
call.
In the Walsh Functions section, you can select the Walsh codes in use for the code
channel from the drop-down menus. The following Walsh code selections are available
to ensure proper allocation of the Walsh code space:
The F-QPCH section allows you to configure the Quick Paging Channel on the BTS being
configured. To enable transmission of the QPCH, select the field to the left of the section
title. When enabled, the QPCH channel gain can be specified relative to the gain of the
forward pilot channel. The Walsh code of the F-QPCH is fixed at 80, as per specification
definition.
When Quasi-Orthogonal Functions are enabled at the parent BSC of the BTS being
configured, the Quasi-Orthogonal Functions section allows you to select which QOF
index (0, 1, 2 or 3) is used.
Additional BTS functionality is available in a floating menu that displays when you right-
click on a BTS icon. Some or all of the menu items may be disabled depending on the
current state of call processing, the current call status, and the current handoff status on
the BTS.
Chapter Four: Advanced Features | 31
Use the right-click menu to access the Add Sector(s) to Soft Handoff option, or select
Test>Add Sector(s) to Soft Handoff. This opens a window where you can select and
configure a Handoff Direction Message to be sent from AirAccess to the mobile station,
and then attempt to add a sector identified in the Candidate Set to the Active Set. For a
sector already part of a soft handoff, use the right-click menu to access the Remove
Sector(s) from Soft Handoff option, or select Test>Remove Sector(s) from Soft Handoff.
This opens a window where you can select and configure a Handoff Direction Message to
be sent to the mobile station removing the sector from a soft handoff.
Hard handoffs can be configured and initiated by selecting Hard Handoff to Selected
Sector(s) from the right-click menu, or selecting Test>Hard Handoff to Selected
Sector(s). When this option is selected, a window displays allowing you to select the
type of Handoff Direction Message to be used, and configure parameters within the
message. Refer to Chapter 5 of this manual for more information on performing handoff
tests.
Directly to the right of BTS icons in the Network Configuration window are a series of
indicators and controls. This is shown in Figure 4-5.
The color of the small box (marker) attached to the BTS icon is an indication of the
current status of the BTS as follows:
The PN Offset and the Sector Level (in dBm) of the BTS also display to the right of the BTS
icon. The Sector Level can be changed dynamically by using the left and right arrows
shown next to the gain value. This is equivalent to changing the Sector Level through the
Configure BTS window.
32 | AirAccess C2K User Manual
• Band class
• CDMA channel number
• Protocol revision
• RF power range
• Enable or disable Authentication, Encryption, Voice Privacy, and Quasi-Orthogonal
Functions
• RF Loss timer value
• Number of automatic Layer 2 retries
• Add or remove BTS’s
• Service Negotiation
• Initiate and end calls
• Fast Forward Power Control (FFPC)
• RLP parameters
• View RLP statistics
Each BSC is configured independently. This means a change made at one BSC does not
affect the configuration of another BSC.
Access the Configure 1X BSC window by clicking on a BSC icon, or by right-clicking the
BSC icon and selecting Configure 1X BSC from the menu. You can also open the window
by selecting Network>Configure 1X BSC. In the Configure BSC window, there are five
tabs that provide access to configuration parameters:
1. General
2. Security
3. Power Control
4. RLP
5. Advanced
Figure 4-6 shows the General tab. Under this tab, you can enter the CDMA Band Class
and CDMA Channel number.
Chapter Four: Advanced Features | 33
Additionally, the General configuration tab allows you to specify which Protocol Revision
is emulated by the BSC.
• TSB-74
• J-STD-008
• IS-95B (IS-95B requires the optional AAC2K-95B software module)
• IS-2000 Rev 0
NOTE: When IS-95B is the selected protocol revision, three additional band classes
are made available: JTACS, Korean PCS P0 and Korean PCS P1. This provides
support for 2G services in the Japanese Cellular and Korean PCS band classes.
(Optional AAC2K 95B software module required).
34 | AirAccess C2K User Manual
When the SR3452 V2 is used, a 23 dB RF Power Range window for the forward link is
specified in this section. This Power Range window defines the minimum and maximum
RF levels that can be achieved from the combined forward links of all of the BTS’s
associated with the BSC being configured.
Under this configuration tab, Quasi-Orthogonal Functions (QOF) can be enabled and
Packet Zone ID can be specified on a BSC level.
Figure 4-7 shows the Security configuration tab. Within this tab, you can configure BSC
security settings such as Authentication, Voice Privacy, Encryption, and Public Long
Code Mask.
Figure 4-8 shows the Power Control configuration tab. Under this tab you can enable Fast
Forward Power Control (FFPC) by specifying the Forward Power Control (FPC) mode as
‘000’. When FFPC is enabled, additional power control parameters are configurable.
These include Target FER, Initial Eb/Nt Setpoint, and Eb/Nt Setpoint Range. The Mobile
Station under Test uses these parameters to determine how to power control the forward
link transmission from AirAccess.
Chapter Four: Advanced Features | 35
Figure 4-9 shows the RLP configuration tab. Under this tab, you can configure radio link
protocol parameters. When data testing is in process on the BSC being configured, these
parameters are used by AirAccess.
Figure 4-10 shows the Advanced configuration tab. Under this tab, you can configure the
advanced BSC settings shown below:
Use the right-click menu to access the Add 1X BTS option. This adds a BTS to the BSC
being configured, if BTS resources are available. Select the Delete 1X BTS option from
the right-click menu to remove the most recently added BTS. Refer to Section 4.4 for
more information on modifying network topology.
The Configure Service Negotiation window is also accessible from the right-click menu.
This is the equivalent of Network>Configure 1X Service Negotiation. Refer to Section
4.8 for more information on configuring service negotiation within AirAccess. Mobile-
terminated calls can be initiated from the right-click menu. Once a call is established, it
can be ended from the right-click menu. Display RLP statistics by selecting View RLP
Statistics from the right-click menu. You can also select View>RLP Statistics.
• Packet Zone ID
Under the General configuration tab, AirAccess allows you to program the Packet
Zone ID on a per BSC basis. This allows each of the BSCs in a two BSC AirAccess
configuration to be configured with different Packet Zone IDs; enabling emulation of
handoffs between PDSNs.
• Voice Privacy Settings
When Authentication is enabled under the Security configuration tab of a BSC, you
have the ability to set the behavior of AirAccess for both network-initiated and
mobile-initiated transitions to voice privacy. The Voice Privacy setting in the General
configuration tab specifies the network-initiated behavior. When set to Enabled,
AirAccess attempts to transition to a private long code mask at the start of a call
(assuming the mobile set the Privacy Mode (PM) bit in the Origination or Page
Response Message) or when the setting is changed during a call. The Voice Privacy
Request from MS setting in this tab specifies the AirAccess response to a mobile-
initiated transition. When set to “Accept”, AirAccess allows a mobile-initiated
request to transition to a private long code mask.
NOTE: In case of EV-DO RevB, AirAccess emulates only one DO Sector with or
without the presence of one BSC.
Access the Configure DO Sector window by clicking the DO Sector icon, or selecting
Network>Configure EV DO Sector.
In the Configure Overhead Messages section, you can configure parameters within the
following overhead message:
• Sync Message
• Quick Config Message
• Sector Parameters Message
• Access Parameters Message
• Broadcast Reverse Rate Limit Message
• Other RAT Neighbor List Message
The Configure DO Sector window is shown in Figure 4-11.
Setting the EV-DO RevB Multi-Carrier parameter allows you to control the EV-DO TCA
message sent from the AN. By default the "AT chooses active set" option is enabled and
you cannot configure the EV-DO RevB TCA message sent from AN.
Enabling the "AN chooses active set" parameter allows you to configure the initial multi-
carrier setting in the TCA message to force negotiating one or two carriers (ActiveSets)
with the AT.
Directly to the right of DO Sector icons in the Network Configuration window are a series
of indicators and controls, as shown in Figure 4-12.
Chapter Four: Advanced Features | 39
The color of the small box (marker) attached to the DO Sector icon is an indication of the
current status of the DO Sector, as shown in the table below.
The PN Offset, Band class, Frequency(s), and the Sector Level (in dBm) of the DO Sector,
also display to the right of the DO Sector icon. The Sector Level can be changed
dynamically by using the left and right arrows shown next to the gain value. This is
equivalent to changing the Sector Level in the Configure BTS window.
• Set UATI
• Set A12 Authentication Behavior
• Enable/Disable eHRPD Emulation
• Set DRCLength
• Set DRCChannelGain
• Set DRCChannelGainBase
• Set AckChanelGain
• Set Dormancy Timer
• Enable/Disable AN Fast Connect
Access the Configure EV-DO AN window by clicking the AN icon, or selecting
Network>Configure EV-DO AN.
Figure 4-13 shows the Configure 1xEV AN window. Within this window, all the fields
show the range of allowed values, or display a drop-down menu of options. For example,
DRCLength has a drop down menu of four choices and DRCChannelGainBases shows a
range of -9.0 to 6.0 at the bottom of the window.
40 | AirAccess C2K User Manual
Additional AN functionality is available in the right-click menu of the AN icon. Some or all
of the menu items may be disabled depending on the current state of call processing
and the current call status.
Use the right-click menu to access the Configure EVDO Personality option. Figure 4-14
shows the Personality window. This window allows you to select protocols that define
the personality of the AN (Rev0, RevA, or RevB) at each layer of the EV-DO protocol stack.
You can select the Default Packet Application, Multi-Flow Packet Application, Enhanced
Multi-Flow Packet Application, or Multi-Link Multi-Flow Packet Application at Application
Layer and assign it to a stream. You can also select default MAC or Enhanced MAC
protocols for FTCMAC, RTCMAC, Access, and Control channels. The window automatically
sets the physical layer subtype based on the selections on MAC Layer.
Figure 4-15 shows the Stream Layer Tab in the Personality window. The Personality
Attributes Tab allows you to change the attributes of the chosen protocol layer.
Figure 4-16 shows the Session Layer Tab in the Personality window. The only attribute
you can edit is SessionCloseTimeout.
Figure 4-17 shows the Connection Layer tab in the Personality window. You can select
the protocol in the Personality Attributes tab and modify the applicable attributes in the
Attribute/Value table.
42 | AirAccess C2K User Manual
Figure 4-18 shows the Security Layer tab in the Personality window. The layer
encompasses three protocols. For each protocol, you can select the protocol subtype.
For example, you could select the Default Key Exchange from the Personality Attributes
drop-down menu, and change any applicable attribute from the Attribute/Value table.
Figure 4-19 shows the MAC Layer tab in the Personality window. AirAccess supports the
Enhanced FTCMAC and Subtype 3 RTCMAC protocols to deliver advertised EV-DO RevA
data throughput rates and Enhanced Access/Control protocols for faster call setup.
Similar to the other layers, you can select the protocol from the Personality drop-down
menu and change the applicable attributes.
Chapter Four: Advanced Features | 43
Figure 4-20 shows the Physical Layer tab in the Personality window. The physical layer
protocol subtype is automatically selected by AirAccess, based on the selections in the
MAC Layer tab.
Right-click in the window to access the Configure QoS Profile option. The QoS
Configuration window displays, as shown in Figure 4-21. This window allows you to
select the flow profiles for the Multi-Flow Packet application for both the forward and
reverse links. You can select from standard QoS categories like VoIP and Gaming or
specify non-standard QoS Profile IDs.
44 | AirAccess C2K User Manual
Navigate between the windows by selecting one of the buttons along the left edge of the
window. Figure 4-22 shows the MSC/IWF Property window after it has been selected.
NOTE: AirAccess supports SO12 (Quick Net Connect) calls only. Async Data Calls are
not supported.
The PDSN Property window is shown in Figure 4-23. AirAccess can emulate Simple IPv4
Only, Mobile IPv4 Only, Mobile IPv4 Preferred, Simple IPv6 Only, and Simple_IPv4_v6
Only. When Mobile IP Preferred is selected, the PDSN falls back to a Simple IP
connection if Mobile IPv4 service cannot be established. If Simple IPv4_v6 Only is
selected, the PDSN can support IPv6CP protocol to negotiate a unique Interface Identifier
and IPCP protocol to negotiate an IPv4 address in one PPP setup procedure while
simultaneously supporting IPv4 and IPv6 traffic flow.
46 | AirAccess C2K User Manual
AirAccess can be configured to simulate two PDSNs. The two PDSN tabs: PDSN #1 and
PDSN #2 are identical on the Core Network tab. You can configure each PDSN
independently. Dual PDSN emulation is only applicable in Dual IS 2000 BSCs, and 1BSC
1 AN configurations.
Several properties affect the PPP link established between the PDSN and the mobile
station (or client computer) for high-speed data service. The IP Service Type selects
Simple IPv4 Only, Mobile IPv4 Only, Mobile IPv4 Preferred, Simple IPv6 Only, or Simple
IPv4_v6 Only operation. The PPP Inactivity Timer controls when AirAccess terminates an
idle PPP link.
The next set of controls configure authentication during the establishment of the PPP
link. Authentication can be turned to OFF, Mandatory, or Optional under the Um PPP
Authentication tab. Once the authentication is ON, AirAccess supports the CHAP-MD5
and PAP authentication protocols. Either of these can be turned off to simulate a PDSN
that does not support that protocol. The Um PPP Authentication window is shown in
Figure 4-24.
Chapter Four: Advanced Features | 47
You can configure the number of challenge attempts and the interval between
challenges for CHAP-MD5. For PAP, you can configure the authentication timeout.
The next two tab pages are applicable to IPv4 and IPv6.
In Configure IPv4 page, SIP Address Pool configures the range of addresses assigned to
the mobile end of the PPP link for Simple IPv4 Only. If AirAccess is connected to the
external LAN, you can put your company DNS and WINS addresses to connect to the
outside network.
The next set of controls is applicable to the EV-DO RevA Quality of Service (QoS) feature.
When Multi Flow Packet Application is selected under the 1X EV AN configuration tab,
you can specify if a Standard reply should be sent from the PDSN, or if the Error Code
should be sent for RSVP messages.
In addition to the normal PDSN functions described above, AirAccess can also be
configured to simulate various PDSN failure scenarios. This is useful for testing the
behavior of a mobile device when service is not available. Select the Simulate PDSN
Failure Scenario, and use the arrow keys to select one of the scenarios.
In the Configure IPv6 window, shown in Figure 4-25, Simple IPv6 Address Pool configures
the range of addresses assigned to the mobile end of the PPP link for Simple IPv6 Only.
48 | AirAccess C2K User Manual
The second group is controls for configuring ICMPv6 behavior. The first option
determines whether the emulator responds to Router Solicitation Messages sent by the
UE. The second option controls the transmission of unsolicited Router Advertisement
messages.
Figure 4-26 shows the Property window for the Mobile IP Foreign Agent (FA) emulation.
When AirAccess is configured for two PDSN operations, two Foreign Agent windows are
available. This allows you to independently configure the behavior of each PDSN/FA. The
first Foreign Agent is used for calls on the first BSC, and the second Foreign Agent is used
to calls on the second BSC.
Chapter Four: Advanced Features | 49
The first two sections of the Foreign Agent window configure the mobility agent
advertisement messages broadcast by the FA. Mobility agent advertisements are ICMP
messages containing the Mobility Agent Advertisement Extension fields. The
Destination Address (broadcast or multicast), Advertisement Lifetime, and the fields in
the Mobility Agent Advertisement Extension can all be configured.
Select Send Unsolicited Advertisements to enable the periodic broadcast of the agent
advertisement messages.
The final section of this window configures how the FA responds to Mobile IP registration
requests from the mobile station. The first option selects normal operation as defined in
IETF RFC 3220. The other options enable testing of the mobile in failure scenarios. You
can choose to have AirAccess respond to a registration request with an error code, or not
respond at all.
The Home Agent section of the CN Configuration window, shown in Figure 4-27, is used
to configure the Home Agent for Mobile IP testing.
50 | AirAccess C2K User Manual
The Home Agent section configures the IP address(es) for the emulated home agent. An
option to accept any HA address is provided for convenience.
The Mobile Station Home Address section is used to select the IP address(es) assigned
to the mobile device on the visited network. If Use Static Address is selected, the same
address is assigned for each Mobile IP session established. Otherwise, a different
address from a pool of addresses is assigned for each Mobile IP session.
The Registration Requests section configures how the Home Agent responds to Mobile IP
registration requests from the mobile station. The first option selects normal operation
as defined in IETF RFC 3220. The other options enable testing of the mobile in failure
scenarios. You can choose to have AirAccess respond to a registration request with an
error code, or not respond at all.
The AAA Server section of the CN Configuration window, shown in Figure 4-28, is used to
configure Authentication, Authorization, and Accounting Server emulation.
Chapter Four: Advanced Features | 51
The AAA Server and Provisioning sections allow you to configure the identifiers,
authentication protocols, passwords, and shared secret data used by the various
protocol layers to authenticate the mobile device being tested. In a real-world network,
this information is typically retrieved from an Authentication, Authorization, and
Accounting (AAA) server.
To modify the current values, click the Change button. This opens the AAA Mobile
Provisioning window shown in Figure 4-29.
NOTE: The NAI1 and NAI2 are for both Simple and Mobile IP.
The NAI3 and NAI4 are for Simple IP only.
52 | AirAccess C2K User Manual
In addition to the normal AAA Server functions described above, AirAccess can also be
configured to simulate an AAA Server failure. This is useful for testing a mobile device’s
behavior when authentication cannot be performed. To do this, select Simulate AAA
failure scenario on the AAA Server Property window.
NOTE: For more information on performing Mobile IP testing with AirAccess, refer to
Section 6.5 of this manual.
Chapter Four: Advanced Features | 53
The Core Network – PDN-GW window, shown in Figure 4-30, allows you to select the UE
IPv4 and IPv6 subnets for each of the three simulated PDN-GWs. You can enter up to
fifteen (15) Access Point Names and associate each with one of the PDN-GWs. The
Access Point Names must match those programmed in the UE for the UE attach to work
as expected. You must specify at least one Access Point Name.
You can also configure the PDN Type, IPv4 Primary/Secondary DNS server addresses and
the IPv6 Primary/Secondary DNS server addresses for each APN. If the AirAccess router is
connected to the LAN, you can enter your local DNS server addresses to allow DNS
requests from the UE to reach them.
The HSGW window, shown in Figure 4-31, is used to configure the P-CSCF addresses,
ICMPv6, VSNCP, and Data Session inactivity behaviors.
54 | AirAccess C2K User Manual
The first group of controls allows you to set the IMS Proxy-Call Session Control Function.
The Proxy-CSCF is the entry point for the IP Multimedia Subsystem (IMS) core network. If
an external IMS Proxy-CSCF is accessible through the AirAccess router, enter its address
here to allow the UE to access IMS application services like Voice-Over-IP.
The second group is controls for configuring ICMPv6 behavior. The first option
determines whether the emulator responds to Router Solicitation Messages sent by the
UE. The second option controls the transmission of unsolicited Router Advertisement
messages.
There are three options for responding to VSNCP Configuration Requests. By default, the
emulator replies as specified in X.S0057. Alternatively, AirAccess can respond with an
Configure Reject message, or ignore the Configuration Requests entirely.
The Data Session Timers control group controls the PPP inactivity timer and Context
Maintenance timer. PPP Inactivity timer is re-started every time there is a PPP activity and
when there is no PPP activity for the duration of the timer the network starts the PPP Link
maintenance i.e. LCP Echo request is sent out to the UE. If there is no response from the
UE, the network releases the VSNCP and goes into the HSGW partial context.
The controls at the bottom of the window configure the emulation of several HSGW
failure scenarios.
The 3GPP AAA window, shown in Figure 4-32, configures the UE NAI and EAP-AKA'
parameters.
Chapter Four: Advanced Features | 55
During eHRPD access the UE always uses the 3GPP AAA server for authorization and
authentication instead of the 3GPP2 AAA server. The 3GPP AAA server uses the EAP-AKA
authentication algorithm. The NAI for eHRPD access is derived from the 3GPP NAI format
defined in 3GPP TS 23.003.
There are two options for EAP-AKA authentication algorithm, MileNage algorithm and
Test algorithm. MileNage algorithm is the default algorithm.
The controls at the bottom of the window configure the emulation of 3GPP AAA Server
failure scenarios.
For a list containing the active PDN attached to the UE, from the main menu, select
Call>Terminate VSNCP or right-click the CN icon and select Terminate VSNCP. The
Terminate VSNCP window displays, as shown in Figure 4-33.
56 | AirAccess C2K User Manual
Select one PDN and click the Terminate button. The HSGW initiates the PDN release
through VSNCP.
• Make sure the check box Enable EHRPD Emulation is checked in Configure 1xEV
AN Tab (Double click on AN)
• Make sure the Enhanced Multi-Flow Application is selected for Stream 2 in
Configure EV-DO Personality window
• Make sure Enhanced Traffic Channel MAC and Subtype 3 Reverse Traffic Channel
MAC is selected for MAC Layer in Configure EV-DO Personality window
• Make sure PDN-GW, HSGW, and 3GPP AAA Server tabs are properly populated in
Configure Core Network window
• Make sure the MultiLink MultiFlow Packet Application (SN) is selected for Stream
2 in Configure EV-DO Personality window
Chapter Four: Advanced Features | 57
• Make sure Subtype 1 Route Update protocol check box is checked for Connection
Layer in Configure EV-DO Personality window
• Make sure Subtype 2 Forward Traffic Channel MAC and Subtype 4 Reverse Traffic
Channel MAC check boxes are checked for MAC layer in Configure EV-DO
Personality window
• Make sure the CDMA Channel #(s) are assigned properly in Configure DO Sector
window. Please remember that for efficient EV-DO RevB operation the recommended
channel spacing is 42 channels or 1.25MHz. It is not advisable for the channels to be
more than 5MHz apart for efficient operation even though AirAccess does not enforce
this restriction.
Select File>Save Test Configuration. This opens a window where you can select a
directory and filename to store the database.
Select File>Recall Test Configuration. This opens a window where you can browse for
the desired database. Once selected, the database contents are automatically used to
update the configuration of AirAccess.
Before testing can begin with AirAccess, the mobile station must be identified. This is
accomplished by clicking the Force MS Registration button in the MS Information
window after the mobile station has acquired service from the AirAccess emulated
network. This is the equivalent of selecting Call>Force MS Registration. This action will
enable timer-based registration. After the mobile station performs a registration (or
sends another Access Channel message), the identification values reported by the
mobile station are displayed in the window. These identification values include:
Both the Force MS Registration and Clear Registration Info actions are also available
from the floating menu shown when you right-click the MS icon.
The MS icon also displays the EV-DO Session information; including the RATI, UATI,
Hardware ID, Color Code etc.
To the right of the MS icon on the Test Configuration window of AirAccess is a brief
summary of mobile station information. This includes the ESN reported by the mobile
station and the protocol revision in use by the mobile (MS_P_REV). Additionally, the total
forward link RF power being provided by AirAccess to the mobile station is reported. This
is a sum of all of the enabled sector outputs.
Chapter Four: Advanced Features | 59
To add a BTS to a BSC, right-click the BSC where the BTS is desired. From the floating
menu that appears, select Add BTS. Alternatively, choose Network>Add Network
Element>BTS. This will cause a BTS to become active in the Test Configuration window.
The added BTS will be configured with a set of default values. These values can be
changed via the Configure BTS dialog (see Section 4.3.1). The initial power level of the
new BTS will be set to the lowest value given the current configuration. This will result in
a change in the total RF power level at the mobile station.
AirAccess stores separate sets of parameters (within the same configuration file) for
each of the BSC/AN modes. For example, changes to a BTS made in one BSC mode do
not affect the second BSC mode. Each time the operator switches between different
modes, AirAccess reloads the appropriate set of parameters.
NOTE: In the current release of AirAccess, the PN Offsets of BTSs are set to fixed
values when in two BSC mode.
• Dual IS-2000 BSCs w/3 BTS – In this configuration, AirAccess 1xPLUS provides two
IS-2000 BSCs, each capable of providing up to 3 BTSs. Each of the BSCs also
supports IS-95A/B and J-STD-008 protocols.
• Dual IS-2000 BSCs w/3 BTS, Dual PDSN – In this configuration, AirAccess 1xPLUS
provides two IS-2000 BSCs, each capable of providing up to 3 BTSs. Each of the
BSCs also supports IS-95A/B and J-STD-008 protocols. A separate PDSN is
implemented for each BSC, thus enabling inter-PDSN handoffs.
• Single IS-2000 BSC w/6 BTS – In this configuration, AirAccess 1xPLUS provides a
single IS-2000 BSC, which provides up to 6 BTSs. This BSC also supports IS-95A/B
and J-STD-008 protocols.
• IS-2000 BSC and IS-856 AN – In this configuration, AirAccess 1xPLUS provides one
IS-2000 BSC and one 1xEV-DO sector. The IS-2000 BSC provides up to 3 BTSs, and
also supports IS-95A/B and J-STD-008 protocols. The 1xEV-DO sector is sector
generated by the SR3462.
• IS-2000 BSC and IS-856 AN, Dual PDSN – In this configuration, AirAccess 1xPLUS
provides one IS-2000 BSC and one 1xEV-DO sector. The IS-2000 BSC provides up to
3 BTSs, and also supports IS-95A/B and J-STD-008 protocols. The 1xEV-DO sector is
generated by the SR3462. A separate PDSN is emulated for the BSC and the AN,
enabling inter-PDSN handoff testing.
• Single AN w/ 2 BTS – In this configuration, AirAccess 1xPLUS provides two 1xEV-DO
sectors. The 1xEV-DO sectors are independent sectors generated by the SR3462.
• Single AN w/ 1 BTS – In this configuration, AirAccess 1xPLUS provides one 1xEV-DO
sector. The 1xEV-DO sector is independent sector generated by the SR3462.
• TIA-856-B AN – In this configuration, AirAccess 1xPLUS provides one 1xEV-DO sector.
The 1xEV-DO sector provides two carriers and is independent sector generated by
the SR3462.
• IS-2000 BSC and TIA-856-B AN – In this configuration, AirAccess 1xPLUS provides
one IS-2000 BSC and one 1xEV-DO RevB sector. The IS-2000 BSC provides up to
three BTSs, and also supports IS-95A/B and J-STD-008 protocols. The 1xEV-DO
sector generated by SR3462 supports two carrier EV-DO RevB protocols.
• IS-2000 BSC and TIA-856-B AN, Dual PDSN – In this configuration, AirAccess
1xPLUS provides one IS-2000 BSC and one 1xEV-DO RevB sector. The IS-2000 BSC
provides up to three BTSs, and also supports IS-95A/B and J-STD-008 protocols.
The 1xEV-DO sector generated by SR3462 supports two carrier EV-DO RevB protocols.
A separate PDSN is emulated for the BSC and the AN, enabling inter-PDSN handoff
testing.
Chapter Four: Advanced Features | 61
Select one of the configurations from the drop-down menu at the top of the Test
Configuration window within AirAccess, as shown in Figure 4-35.
Click any message to display the parsed detail of the selected message. A sample
Message Analyzer window with an expanded entry is shown in Figure 4-36. A sample
Test Results window with expanded entry is shown in Figure 4-37.
To clear the contents of the Message Analyzer and Test Results windows, select
File>Clear Test/Message Logs.
CAUTION: Clear the logs only after saving any important data. Once the logs are
cleared, the data cannot be restored.
• Select File>Save Test/Message Logs. The Save As window displays, allowing you to
select a directory and filename to store the database.
• Alternatively, if the database was already saved during the current AirAccess session,
you can select File>Save Test/Message Logs to save the database to a previously
specified filename.
To recall Message Analyzer and Test Results logs:
• Select File>Open Test/Message Logs. The Browse window displays, allowing you to
browse for the desired database. Once selected, the database contents display in
the Message Analyzer and Test Results windows.
64 | AirAccess C2K User Manual
The PN Pane allows the specification of which messages are displayed based on the PN
offset associated with a message. The Frequency pane allows the specification of which
messages are displayed based on frequency of transmission. The Channel pane allows
the specification of which messages are displayed based on the channel type the
message is sent or received on.
The Protocol pane allows the specification of which messages are displayed based on
the protocol of the message. The Flow ID pane allows the specification of messages
associated with specific FlowID (EV-DO RevA/RevB). The Protocol Subtype pane allows
the specification of which messages are displayed based on protocol subtype of the
messages as shown in figure above
Chapter Four: Advanced Features | 65
4.6. Authentication
Authentication is the process by which the base station confirms the identity of the
mobile station. The authentication process is successful when the base station and
mobile station possess identical sets of Shared Secret Data (SSD). The base station may
request authentication during MS registration, call origination or call termination, or at
any time using the Unique Challenge-Response procedure.
NOTE: Whenever an A-key value is entered, the A-key checksum is calculated and
displayed beneath the A-key value. The A-key checksum may be needed to program
the A-key value into the mobile station.
Set the same A-key value in AirAccess and the mobile station being tested. See “Setting
the A-key”, above, for instructions for setting the A-key used by AirAccess. The procedure
for programming the A-key into the mobile station is device-specific (unless a
diagnostic/provisioning tool such as the Spirent Universal Diagnostic Monitor (UDM) is
used).
Start the SSD Update procedure by selecting Test>SSD Update from the application
menu.
AirAccess performs the SSD Update procedure and displays the result in the Test Results
window. If the SSD Update procedure completes successfully, the text displayed is
green. If the procedure is unsuccessful, the text is red.
Double-click the SSD Update test result to view the test details:
If the SSD Update procedure fails, the Test Status line displays the reason for the failure.
If desired, the messages exchanged between AirAccess C2K and the mobile station can
be examined in detail using the Message Analyzer window.
Fail - COUNT mismatch The COUNT field received in the Registration, Origination or Page
Response Message did not match the expected value.
Fail - RANDC mismatch The RANDC field received in the Registration, Origination or Page
Response Message and the most significant 8 bits of the RAND
field sent in the Access Parameters Message did not match
If desired, the messages exchanged between AirAccess and the mobile station can be
examined in detail using the Message Analyzer window.
If the authentication fails, the Test Status line displays the reason for the failure.
If desired, the messages exchanged between AirAccess and the mobile station can be
examined in detail using the Message Analyzer window.
Chapter Four: Advanced Features | 69
The AT and AN independently compute the CHAP Response value from the ID and
random number sent in the CHAP Challenge message and secret information known to
both parties. Upon receiving the CHAP Response message, the AN compares the
received value with the computed value. If they match, the AN sends the CHAP Success
message. If the values do not match, the AN sends the CHAP Failure message and
optionally, closes the session.
AirAccess provides detailed test results whenever AN authentication occurs. Figure 4-40
shows the typical test results logged when AN authentication fails.
70 | AirAccess C2K User Manual
Figure 4-41 shows the detailed results logged when AN authentication fails. The reason
for the failure is given along with the NAI and CHAP Secret values configured in
AirAccess, the Challenge ID and Challenge Value sent to the AT, the CHAP Response
value computed by the AN, and the NAI and CHAP Response values received from the AT.
Select Network>Configure Core Network from the AirAccess C2K menu to open the
Configure CN window. In this window, select the AAA Server tab to enter the AAA Server
settings. Click the Change button under Mobile Provisioning to access the NAI and CHAP
Secret parameters. The Mobile Provisioning window is shown in Figure 4-42.
Chapter Four: Advanced Features | 71
Figure 4-42: Mobile Provisioning Window –Setting the NAI and CHAP Secret
NOTE: Enhanced encryption is not available if the protocol in use is TSB-74 or J-STD-
008.
4.7.2. Enabling VP
VP can be enabled both before and during a voice conversation.
To enable VP:
Note that the Voice Privacy Request from MS setting under the Security tab controls the
behavior of AirAccess when the mobile initiates a request to transition to using the
private long code mask. When this setting is set to “Accept”, AirAccess allows the
transition to a private long code mask to take place.
Chapter Four: Advanced Features | 73
AirAccess can be configured to test service negotiation procedures during both mobile-
originated and mobile-terminated calls.
To open the Configure Service Negotiation window for a particular BSC, select the
desired BSC and select Network>Configure Service Negotiation from the application
menu. Figure 4-43 shows the Configure Service Negotiation window.
The upper part of the window lists the primary and alternate service configurations
selected. Up to two alternate service configurations may be configured.
The controls in the lower part of the window are used to edit the attributes of each
service configuration. To edit the attributes in a service configuration, first select the
configuration in the Service Configurations list. Then use the individual controls to select
the desired attributes for the service configuration.
NOTE: In the current version of AirAccess, variable frame sizes and the Dedicated
Common Control Channels (F/R-DCCH) are not supported. The controls for
configuring these attributes are disabled.
If service negotiation between the emulator and the mobile station fails, the test result
“Call setup failed” is logged. The Test Results Details window lists the reason for call
setup failure as “Service Negotiation failed”.
The messages exchanged during call establishment and service negotiation can be
viewed in detail using the Message Analyzer window.
The Configuring SMV Parameters window displays, as shown in Figure 4-46. From this
window, you can either enable or disable AirAccess from sending the optional Service
Option Control Message at the appropriate time during service negotiation. If enabled,
you can further configure the SMV Encoding Mode and the Mobile-to-Mobile Processing
parameters.
4. Use the drop-down list at the top of the Message Insertion window to select the type
of CDMA message.
Customize the message fields by selecting field values with the mouse, then entering a
new value. Most fields can be set using hexadecimal values to represent the bits to be
sent. For convenience, some fields can be set using a pull-down menu, which allows you
to select the valid bit patterns for that field.
As fields are modified, the message field list automatically updates as needed. For
example, if the ADDR_TYPE field in the Order Message is changed, the ADDR_LEN and
the address fields that follow (such as IMSI_CLASS) will change. Optional fields are
added and deleted as specified in the IS-2000 standards.
Some fields, such as the Message Sequence Number (MSG_SEQ), are filled in by the
base station emulator when the message is transmitted. Other fields, such as the
Address Record Length (ADDR_LEN), are calculated automatically based on the values of
other fields. These fields are read-only; you cannot edit the values shown.
NOTE: For values that must be filled in when the message is transmitted, such as
the message sequence number, the value that appears in the message field list may
not be the value actually transmitted. Always refer to the Message Analyzer to view
the actual messages sent to the mobile.
Chapter Four: Advanced Features | 79
Some messages contain one or more records. Each record repeats a set of fields. The
number of records included in the message often depends on the value of a field earlier
in the message. The message field list automatically displays the correct number of
records. Records are indented to make them easier to recognize. The first field in a
record is marked with an arrow.
Sometimes, the number of records does not depend on another message field, but
instead on the length of the message itself. In these cases, the message field list
contains a field labeled “Number of occurrences of record”. Enter the number of records
desired, and the message field list expands or contracts in response.
Click the Send Message button to insert the message into the paging channels
associated with the selected BSC.
Click the Close Window button to close the message insertion window when you are
finished sending messages.
1. Follow the procedure in Section 4.9.1 of this manual (for a Paging Channel Message)
or Section 4.9.2 of this manual (for a Traffic Channel Message) to open the
appropriate Message Insertion window.
2. Using the pull-down list at the top of the window and select Data Burst Message.
3. Select Position Determination from the BURST_TYPE list, as shown in Figure 4-48.
4. The IS-801.1-specific fields display and can now be populated.
80 | AirAccess C2K User Manual
To specify these limits, access the Code Channels tab within the Configure BTS 1X
window by double-clicking on a BTS icon, as shown in Figure 4-49.
When FFPC is enabled, inner loop and outer loop set points for FFPC are specified on a
per BSC basis within AirAccess. To enable FFPC and specify these set points, access the
Power Control tab within the Configure 1X BSC window by clicking the BSC icon.
To set up a scenario, first select an event to trigger custom processing. In Figure 4-51,
the event selected is the arrival of an MS Origination Message. Next, select the desired
response. In Figure 4-51, the Reorder Order has been selected as the response to an MS
Origination Message.
When a response message has been selected, the individual message fields are
displayed in the grid at the bottom of the window. The grid can be used to further
customize the response by editing selected fields in the response message.
If Repetition is set to “Once”, the custom response will only be sent the first time the
triggering event occurs. For subsequent occurrences of this event, AirAccess will respond
in its usual way. If Repetition is set to “All”, AirAccess will send the custom response
until the custom behavior is disabled.
Click the Apply button to enable custom call processing and close the window. When
custom call processing is enabled, an asterisk (*) displays beside the BSC or AN icon in
the Test Configuration window.
To disable custom call processing, click the Clear button before clicking Apply.
Select the “Base Station-specified PLCM” option and ensure the Mobile Station under
Test is MEID-capable. AirAccess then uses the MEID Extended Channel Assignment
message instead of the Extended Channel Assignment to assign the FCH to the mobile
station.
If the PLCM_TYPE_INCL field is set to “0”, the target base station continues to use the
current PLCM. This selection overrides the PLCM options selected for the target base
station.
5.1. Overview
As the mobile station moves relative to the fixed base stations, the network must switch
the mobile between base stations to maintain communications. This process is referred
to as handoff. Handoffs may also occur to relieve network congestion. Handoffs are
initiated by the network, but the mobile station plays an important role by monitoring
and reporting the strength of pilot signals transmitted by the various BTS.
Several distinct types of handoffs may occur in a CDMA network. Idle handoffs occur
when the mobile station is not actively on a call. Access handoffs may occur during call
setup. Soft/softer handoffs (where the mobile communicates over multiple channels
simultaneously) are a key feature of CDMA systems. Hard handoffs, unlike soft handoffs,
break the connection briefly (for example, to switch the call to a new frequency). Data
Dormant handoffs occur when a mobile station is on an active data call but must perform
a handoff that cannot maintain the air-link integrity.
AirAccess can test idle handoffs and soft handoffs among as many as six BTS, and hard
handoffs across BSCs. Additionally, AirAccess 1xPLUS enables testing of data dormant
and idle handoffs between CDMA2000 1X and 1xEV-DO.
NOTE: Because hard handoffs in AirAccess are implemented across BSCs, hard
handoffs are not available in the AirAccess configuration which utilizes a single
SR342 with Internal RF option.
To set up a neighbor list, edit these overhead messages using the Configure 1X BTS
window. Refer to Section 4.3: Configuring Network Components for details.
Enter the number of pilots that should display in the list by changing the “Number of
occurrences of record” value.
In each sub-record, set the NGHBR_PN field to the PN Offset of one of the neighboring
sectors.
The individual sector gains (Level) and the total RF transmit power (Total) display in the
Test Configuration window.
7. The mobile should perform another zone-based registration. The PN offset for the
Registration Message should correspond to the new strongest pilot. This indicates
that the mobile station has locked onto the stronger pilot, completing an idle
handoff.
Currently the mobile is communicating with a single base station sector (PN Offset = 0 in
the example above).
The other pilot signals are too weak, so the candidate list is empty. Note that the Test
Configuration window indicates the active sector with a small green marker. The markers
for the remaining sectors are gray, indicating that they are transmitting pilot signals, but
are not considered candidates for handoff.
6. Use the spin control to increase the gain of one of the other sectors until it is level
with the active sector.
As you increase the gain, you should see the marker for that sector change from gray
to yellow. At the same time, AirAccess will log a Pilot Strength Measurement
Message in the message log and another “Active List updated” line in the test
results log.
Chapter Five: Handoffs | 87
Candidate Set:
PN Offset Strength Keep
8 24 1
The mobile has reported the increased signal strength using the Pilot Strength
Measurement Message. The details of this message can be viewed using the
Message Analyzer. Based on this message, AirAccess has added the second sector
to the candidate set.
8. Select the BTS icon for the candidate sector, and then select Test>Add Sector(s) to
Soft Handoff from the menu. This opens the window shown in Figure 5-1, which
allows you to select the type of Handoff Direction Message used.
The available Handoff Direction Messages are:
Extended Handoff Direction Message
General Handoff Direction Message
Universal Handoff Direction Message
9. Configure the parameters of the selected handoff message and click the Handoff
button.
10. In the Message Log, the Handoff Direction Messages sent by the base station
emulator and the Handoff Completion Messages sent in response by the mobile
station should display. In the Test Results window, several entries should display:
Add sector (PN:8) to soft handoff
BSC 1: Preamble detected on reverse link
BSC 1: Enter Conversation Substate
Soft Handoff
Active List updated
The first line was logged when the Handoff button was clicked. The next two lines report
key events in the soft handoff process.
88 | AirAccess C2K User Manual
11. The “Soft Handoff” line indicates whether the process completed successfully
(green) or failed (red).
When the handoff completes successfully, the active list is updated. Double-click on
the line reading “Active List updated” to view the updated active and candidate sets:
Active Set:
PN Offset Strength Keep
0 16 1
8 24 1
Candidate Set:
PN Offset Strength Keep
Now both sectors are members of the active set, meaning that the mobile station is
simultaneously communicating with both. The simultaneous connection is also
indicated on the Test Configuration window (both sectors have green markers).
12. Decrease the gain of the first sector. After you decrease the gain, the marker should
change from green to red. This is in response to another Pilot Strength Measurement
Message from the mobile.
Active and Candidate Sets:
Active Set:
PN Offset Strength Keep
0 39 0
8 15 1
Candidate Set:
PN Offset Strength Keep
NOTE: The mobile now reports that the signal from one of the sectors is below the
level desired (Keep = 0).
13. Remove this sector from soft handoff by highlighting its BTS icon, then selecting
Test>Remove Sector(s) from Soft Handoff from the menu.
AirAccess opens a window, as shown in Figure 5-1, allowing you to select the type of
Handoff Direction Message used.
Select and configure the handoff message, and then click the Handoff button to
send the message.
14. The Message Analyzer displays the CDMA messages sent and received, the Test
Results window displays the results of the handoff process. The Test Configuration
window displays the updated state of the active and candidate sets.
If the process completed successfully, the mobile should be communicating with only a
single BTS.
Chapter Five: Handoffs | 89
The process to perform a reduced active set soft handoff is similar to the process used
for a regular soft handoff as described above. The variations to the steps above are:
Instead of initiating a mobile-terminated call, create a high-speed packet data call with
supplemental channels active. Refer to Section 6.3.4 of this manual for information on
establishing this data call.
When ready to initiate the handoff, select the BTS icon for the candidate sector, and then
select Test>Add FCH to Soft Handoff
After the handoff, the added sector that only is communicating over the fundamental
channels (i.e. the supplemental channels were not added on the new sector) will be
indicated by a box next to the BTS tower that is half green, half white.
During hard handoff, the mobile station communications with only one base station at a
time. Hard handoffs are a break-before-make connection.
In AirAccess, hard handoffs are performed between two BTSs on different BSCs.
1. Create a network topology with two BSCs and one active BTS per BSC.
2. Confirm that the other pilots are not in the Neighbor List Message broadcast by each
BTS.
3. Set the sector gain for one sector 12 dB higher than the other. Set the relative level
for each pilot to the same level (-7.0 dB).
4. Start call processing by selecting Call>Start Call Processing, register the mobile by
selecting Call>Force MS Registration, and initiate a MS-terminated call by selecting
Call>Initiate MS-Terminated Call.
5. Verify the call is established on the sector with the higher gain setting. This can be
verified by observing the small green marker next to the active sector.
6. Use the spin control to increase the gain of the other sector (the “target” sector) until
it is level with the active sector.
90 | AirAccess C2K User Manual
7. Select the BTS icon for the target sector, and then select Test>Hard Handoff to
Selected Sector(s) from the menu. This opens the window shown in Figure 5-2,
allowing you to select the type of Handoff Direction Message. The available Handoff
Direction Messages are:
a. Extended Handoff Direction Message
b. General Handoff Direction Message
c. Universal Handoff Direction Message
8. Configure the parameters of the selected handoff message and click the Handoff
button.
9. The message log displays the Handoff Direction Messages sent by the base station
emulator and the Handoff Completion Message sent in response by the mobile
station. In the Test Results window, the following entries display:
a. BSC 1: Enter Handoff Sub-state
b. BSC 2: Enter Handoff Sub-state
c. Hard Handoff
d. BSC 1: Preamble detected on reverse link
e. BSC 2: Enter Paging Channel Processing State
f. BSC 1: Enter Conversation Sub-state
g. Active List updated
The first line is logged after clicking the Handoff button. Subsequent lines report key
events in the hard handoff process.
10. The “Hard Handoff” line indicates whether the process completed successfully
(green) or failed (red).
If the process is successful, the mobile now communicates with the target BTS, and no
longer the original BTS.
Chapter Five: Handoffs | 91
During inter-technology handoff, the mobile station communications with either the BSC
or AN. Inter-technology handoffs are a break-before-make connection.
In AirAccess, inter-technology dormant data handoffs are performed between 1xRTT BTS
and 1xEV-DO Sector.
1. Create a network topology with one BSC with one connected BTS and one AN.
2. Disable RF transmission for 1xEV-DO sector by right-clicking DO Sector and selecting
Disable RF Transmission.
3. Set the RANHandoff attribute of Stream 2 to 1 by selecting Network>Configure EV-
DO Personality. Under the Personality Attribute tab, select Stream 2, as shown in
Figure 5-3.
4. Open the Configure Service Negotiation window by selecting Network>Configure 1X
Service Negotiation, and select a packet data service option (SO33).
5. Configure parameters for the SO33, as discussed in Section 4.8), and click OK.
6. Start call processing by selecting Call>Start Call Processing.
7. Connect a terminal (TE2M) to the mobile under test. Configure the mobile for a
packet data call.
8. Initiate a mobile-originated dial-up connection using the username: test and the
password: test.
9. Verify the call is established on the BTS sector. This can be verified by observing the
small green marker next to the active sector.
10. Enable 1xEV-DO Sector RF Transmission by right-clicking DO Sector and selecting
Enable RF Transmission.
If the process completed successfully, the mobile communicates with the DO Sector, and
not the original BTS.
92 | AirAccess C2K User Manual
6.1. Overview
This chapter is applicable to AirAccess C2K and AirAccess 1xPLUS.
These optional AirAccess software modules provide asynchronous and packet data
service test capabilities:
For data services testing, AirAccess emulates the transceiver (BSC/BTS), Mobile
Switching Center (MSC), Inter-Working Function (IWF), and Packet Data Serving Node
(PDSN). In the case of Mobile IP, AirAccess also emulates a Home Agent (HA), Foreign
Agent (FA) and AAA Server.
5. Run a packet data application, such as a Web browser or FTP client, on the
terminal attached to the mobile (TE2M).
6. The AirAccess System Controller PC runs the Microsoft Internet Information Server
(IIS) Web server and FTP server. These servers can be accessed using the IP
address of the AirAccess controller (192.168.0.5). Other servers can be accessed
if AirAccess is attached to an external LAN via the provided Router
Run a packet data application, such as a Web browser or FTP client, on the terminal
attached to the mobile (TE2M).
The AirAccess System Controller PC runs the Microsoft Internet Information Server (IIS)
Web server and FTP server. These servers can be accessed using the IP address of the
AirAccess controller (192.168.0.5). Other servers can be accessed if AirAccess is
attached to an external LAN via the provided Router.
AirAccess can be used to test the transition to dormant state and reestablishment of
the dormant link layer connection. AirAccess implements a programmable inactivity
timer to determine when to go to the dormant state.
NOTE: If the mobile fails to keep its end of the PPP link active after entering
dormant state, attempts to reestablish the data link will fail. AirAccess
implements a dormant time-out to recover from this situation. After 3 minutes of
inactivity in the dormant state, AirAccess will terminate its end of the PPP link
and enter the Null state. Once the emulator enters the Null state, a new call can
be established.
Within AirAccess, supplemental channels can be enabled from the Configure Service
Negotiation window. To open this window, select Network>Configure 1X Service
Negotiation or select Configure Service Negotiation from the right-click menu of the
BSC.
Supplemental channels are enabled within the Configure Service Negotiation window
by first selecting SO33 as the service option. Once SO33 is selected, forward and
reverse supplemental channels can independently be enabled by checking the
appropriate boxes within the f/r-dtch Configuration section of the window.
The maximum air-link throughput available on either the forward link or reverse link is
a function of the selected multiplex options on the fundamental and supplemental
channels, as well as the format of RLP3 frames used. Refer to Section 6.3.7 below for
information on changing RLP3 frame format types.
When one or more supplemental channels are enabled under the f/r-dtch
Configuration section of the window, a Coding option is made available. This coding
option provides two selections:
• Convolutional Only
• Convolutional / Turbo
Chapter Six: Data Services Testing | 97
When Convolutional Only is selected, AirAccess will use Convolutional Coding on the
supplemental channel regardless of the selected multiplex option. When
Convolutional / Turbo is selection, AirAccess will use Convolutional Coding on the
supplemental channel when the multiplex option in use is less than 0x809, and will
use Turbo Coding on the supplemental channel when the multiplex option in use is
greater than or equal to 0x809.
To monitor RLP statistics, select View RLP Statistics from the right-click menu of a BSC
icon where a data call is active. Statistics can also be accessed by highlighting the
BSC icon where a data call is active and then selecting View>RLP Statistics. This will
display the RLP Statistics window, as shown in Figure 6-1.
Statistics within this window are updated periodically in a real-time fashion while the
window is open. The Reset Counts button within the window is used to zero the
displayed counters.
When the Log Counts button within the window is selected, a snapshot of the current
RLP statistics is logged in the Test Results window. These logged results will be saved
if the Message Analyzer and Test Results are saved (File>Save Test/Message Logs).
Additionally, a snapshot of RLP statistics is automatically logged in the Test Results
window when a data call ends or a data call transitions off of a BSC (i.e. a handoff
across BSCs occurs).
98 | AirAccess C2K User Manual
• Service ID
• Last Round Trip Timer
• RLP Resets
• RLP Aborts
• Transmit Counts
• Total 20ms Frames
• New Data Frames
• Idle Frames
• Fill Frames
• Retransmitted Frames
• Total Bytes Sent
• NAKs Sent
• Receive Counts
• Total 20ms Frames
• New Data Frames
• Idle Frames
• Fill Frames
• Retransmitted Frames
• Total Bytes Received
• NAKs Received
• Retransmits Not Found
• RLP Erasures
• Mux Erasures
Chapter Six: Data Services Testing | 99
To view the contents of an RLP frame, double-click on the entry in the Message
Analyzer window. An example of an RLP frame is shown in Figure 6-2.
Message filtering can be used to enable or disable the display of RLP frames in the
Message Analyzer window. Refer to Section 4.5.4 for more information on message
filtering.
The data traffic is saved in a file with a “.dmp” extension by default. The exported
data is in the format generated by the UNIX/LINUX Point-To-Point Protocol Daemon
(pppd) report option. This format can be converted to a readable format by the
pppdump(8) utility, or viewed in any protocol analysis tool that can read pppd(8)
report output, such as Ethereal.
100 | AirAccess C2K User Manual
NOTE: These data rates specified in the below sections might not be realized due
to rate limitations of the data connection to the Mobile Station under Test.
• FCH and SCH using Mux Option 0x03: Format A – Segmented Data Frames
• SCH using Mux Options > 0x03: Format D Data Frames
• Unsegmented Data Frames – No Format B Frames
Chapter Six: Data Services Testing | 101
• FCH and SCH using Mux Option 0x03: Format A – Unsegmented Data Frames
• SCH using Mux Options > 0x03: Format C Data Frames
When not enough data is available, AirAccess will fall back to the following RLP frame
formats:
• FCH and SCH using Mux Option 0x03: Format A – Segmented Data Frames
• SCH using Mux Options > 0x03: Format D Data Frames
Given the above RLP frame format usage, the following table summaries the maximum
air-link throughputs, taking into account RLP overhead.
• FCH and SCH using Mux Option 0x03: Format B Data Frames
• SCH using Mux Options > 0x03: Format C Data Frames
When not enough data is available, AirAccess will fall back to the following RLP frame
formats:
• FCH and SCH using Mux Option 0x03: Format A – Segmented Data Frames
• SCH using Mux Options > 0x03: Format D Data Frames
102 | AirAccess C2K User Manual
1. From the Configure Service Negotiation window (refer to Section 4.8) select SO32
as the Primary service option.
2. When SO32 is selected, a Configure TDSO Parameters button displays.
3. Click on the Configure TDSO Parameters button to access the TDSO configuration
window as shown in Figure 6-3.
4. Set the TDSO parameters as desired on a per code channel basis and click the
Apply button, or click the Apply to All Channels button to apply the displayed
parameters to all code channels.
5. Click the OK button to close the Configure TDSO Parameters window and then click
the OK button to close the Configure Service Negotiation window.
6. Establish a TDSO call either by originating a TDSO call from the mobile station or
performing a mobile-terminated call from AirAccess by selecting Call>Initiate MS-
Terminated Call.
Chapter Six: Data Services Testing | 103
To monitor TDSO counter, select View TDSO Counters from the right-click menu of a
BSC icon where a TDSO call is active. Counters can also be accessed by highlighting
the BSC icon where a data call is active and then selecting View>TDSO Counters. This
will display the TDSO Counters window, as shown in Figure 6-4.
Counters within this window are updated periodically in a real-time while the window
is open. The Reset Counts button within the window is used to zero the displayed
counters.
When the Log Counts button within the window is selected, a snapshot of the current
TDSO counters is logged in the Test Results window. These logged results will be
saved if the Message Analyzer and Test Results are saved (File>Save Test/Message
Logs).
4. Run a packet data application, such as a Web browser or FTP client, on the
terminal attached to the mobile (TE2M).
To run any kind of data application, an external server should be connected to
AirAccess via the Ethernet interface. Attach the AirAccess 1xPLUS to an external LAN
as to access the Application server.
Upon establishing the traffic channel with a packet data service option, the mobile
station and AirAccess should exchange Mobile IP-specific messages as per the
message flow shown in Figure 6-5. The detailed contents of these messages display in
the AirAccess Test Results window.
To use your own private/public key pair, save the key/pair in ASN.1 format, as defined
in IETF RFC 2313. AirAccess provides three pre-defined public/private key pairs in the
subdirectory “RSA Private Keys”.
The Public Key Identifier fields can be modified by entering new values in the DMU
window.
1. Prior to initiating a data call, click the Invalidate Mobile IP Keys button.
This configures the AAA emulation for the Update Keys state.
2. Initiate a mobile-originated data call.
3. When the mobile device sends the Mobile IP Registration Request, AirAccess
responds with an error code to initiate DMU. Configure this error code by setting
the value RRP Error Code for DMU in the DMU window.
AirAccess logs test results recording the progress of the key update. If DMU succeeds,
the call is established and the DMU window indicates that the AAA emulation has
reached the Keys Valid state.
110 | AirAccess C2K User Manual
If Delay RRP with AAA Authenticator CVSE is checked, AirAccess will not respond to the
first Registration Request with updated authentication keys. If Delay RRP that finishes
DMU operation is checked, AirAccess will not respond to the final Registration
Request from the mobile after the updated keys have been validated.
It may also be necessary to configure the mobile or access terminal (and computer
attached to the mobile or access terminal) properly to achieve maximum data rates.
For example, to achieve 3.1 Mbps forward link 1xEV-DO data transfer rates, it may be
necessary to fix the reverse link rate of the access terminal to the maximum data rate.
Additionally, TCP window sizes may have an impact on data rates. In most instances,
the TCPWindowSize (a Windows Registry entry) on the access terminal side should be
set to at least 62,780.
112 | AirAccess C2K User Manual
• A MS-terminated data call was initiated from the land-side terminal application
without first starting call processing and/or registering the mobile.
Verify that AirAccess has connected to the SR3452 V2, call processing has been
enabled (and the mobile sees service), and the mobile can be successfully
registered before retrying the call.
• A configuration or protocol error prevented the call from going through.
• Examine the message log to determine the reason that the call could not be
established.
• A packet data call was in the dormant state when an MS-terminated async call
was attempted.
End the packet call before attempting to place an async data call.
• A voice call was established while a packet data call was in the dormant state.
Later, a data application attempted to send more data over the dormant link, but
the data call could not be reestablished because the voice call was active.
• The data that could not be sent will be discarded. The voice call will remain active.
7. Overlay Services Testing
7.1. Overview
This chapter is applicable to AirAccess C2K and AirAccess 1xPLUS in CDMA2000 1X
mode.
Overlay Services are CDMA upper layer features that are not explicitly part of an IS-95
or IS-2000 air interface, but do use these specifications as a transport mechanism.
Examples of overlay services are Short Message Service (SMS), Over-the-Air Service
Provisioning (OTASP) and Over-the-Air Parameter Administration (OTAPA).
To send the SMS message on the Paging Channel, click Send SMS Message while in
the Idle State to generate the message to the mobile station.
To send the SMS message on the Forward Traffic Channel, an SMS call must first be
established. This can be accomplished by performing the following steps:
Ensure that an SMS service option (SO6 or SO14) is the primary service option
configured in the Configure Service Negotiation window (see Section 4.8)
After the call completes, verify the selected SMS service option is active as indicated
in the Test Results window
Click Send SMS Message to send the SMS message on the traffic channel
End the call by selecting Call>End Call or selecting End Call from the right-click menu
of the BSC icon
Contents of the SMS message and the mobile station’s response are displayed in the
Test Results window.
Mobile originated SMS can be performed at any time after the mobile station has
identified itself to AirAccess. The contents of any SMS message received by AirAccess
from the mobile station, as well as the acknowledgement message sent back to the
mobile station, are displayed in the Test Results window.
1. Open the Configure BTS window of the BTS that will be used for testing by double-
clicking on its BTS icon
2. Select the Extended System Parameters Message from the Configure Overhead
Messages list
3. Select the BCAST_INDEX message field and change the value to a non-zero entry
corresponding to the desired broadcast slot cycle index
4. Click the OK button to exit the window
5. If the BCAST_INDEX parameter is set to zero on a given BTS, AirAccess will
implement Multi-Slot Broadcasting on that BTS.
1. Use the SMS Procedure Window (shown in Figure 7-1) to generate the contents of
the desired SMS message.
2. After composing the message and configuring all desired flags, click the Save SMS
Message button.
3. This will launch a Save As window. Enter a filename to save the SMS message. By
default, saved SMS messages are stored in the SMS Message Definitions
subdirectory.
Perform the following steps to recall a previously saved SMS message:
5. Once the message is displayed, the Send SMS Message button can be clicked to
send the recalled message to the mobile under test.
AirAccess requires the following software option to be able to perform SMSC client
function:
Note: Please note that it is the responsibility of the user to secure NowMMS license
for MMS testing. AirAccess does not provide or ships with NoWMMS server.
AirAccess provides support of both OTASP and OTAPA testing using the protocol
defined in IS-683A, IS-683B, IS-683C, IS-683D, and IS-683E.
NOTE: Many test plans will specify a specific activation code must be used to
originate an OTASP call (for example, *22801). While these codes can be used to
originate the call, AirAccess C2K does not require any specific digits be used to
originate the call.
Chapter Seven: Overlay Services Testing | 117
From within the OTASP/OTAPA window, the OTA messages defined within IS-683-A
can be selected from the pull-down menu and configured.
The following message types can be sent using the OTASP/OTAPA procedure window:
Typically, the first message that is sent at the start of an OTASP session is the Protocol
Capability Request Message. This request will ask the mobile station to respond with
which OTASP features it supports. Results of all OTASP message exchanges can be
viewed in the Test Results window. If changes are made to the NAM parameters of the
mobile station during the OTASP session, a Commit Request Message must be sent to
the mobile station. This will instruct the mobile station to move the changes from
temporary memory to permanent memory.
To perform this type of OTAPA testing, it is first necessary to establish either a mobile-
originated or mobile-terminated voice call. Ensure that the primary service
configuration within AirAccess’ Service Negotiation window is set for a voice service
option (Service Options 1, 3, 17 or 32768). Refer to Section 4.8.
Originate a call from the mobile station, or command AirAccess to perform a mobile-
terminated call. After the voice call is successfully established, the OTASP/OTAPA
procedure window can be opened by selecting Test>OTASP/OTAPA, or by clicking on
OTASP/OTAPA from the right-click menu of the CN icon. The window shown in Figure
7-2 displays. All of the IS-683-A messages available for OTASP testing (see Section
7.3.1) are also available for OTAPA testing.
Typically, the first message that is sent at the start of an OTAPA session is the OTAPA
Request Message with the START_STOP field set to ‘1’. This indicates to the mobile
station that an OTAPA session is being started. Results of all OTAPA message
exchanges can be viewed in the Test Results window. If changes are made to the NAM
parameters of the mobile station during the OTASP session, a Commit Request
Message must be sent to the mobile station. This will instruct the mobile station to
move the changes from temporary memory to permanent memory. The final message
typically sent at the end of an OTAPA session is the OTAPA Request Message with the
START_STOP field set to ‘0’. This indicates to the mobile station that an OTAPA
session is being ended.
Chapter Seven: Overlay Services Testing | 119
• For a 9.6 kbps (Rate Set 1) OTAPA call, use Service Option 18
• For a 14.4 kbps (Rate Set 2) OTAPA call, use Service Option 19
Command AirAccess to perform a mobile-terminated call. After the OTAPA call is
successfully established, the OTASP/OTAPA procedure window can be opened by
selecting Test>OTASP/OTAPA, or by clicking on OTASP/OTAPA from the right-click
menu of the CN icon. The window shown in Figure 7-2 will appear. All of the IS-683-A
messages available for OTASP testing (see Section 7.3.1) are also available for OTAPA
testing.
Typically, the first message that is sent at the start of an OTAPA session is the OTAPA
Request Message with the START_STOP field set to ‘1’. This indicates to the mobile
station that an OTAPA session is being started. Results of all OTAPA message
exchanges can be viewed in the Test Results window. If changes are made to the NAM
parameters of the mobile station during the OTASP session, a Commit Request
Message must be sent to the mobile station. This will instruct the mobile station to
move the changes from temporary memory to permanent memory. The final message
typically sent at the end of an OTAPA session is the OTAPA Request Message with the
START_STOP field set to ‘0’. This indicates to the mobile station that an OTAPA
session is being ended.
• PRL Download
• PRL Upload
120 | AirAccess C2K User Manual
Once an OTASP or OTAPA session has been established, a macro can be selected from
the pull-down list in the OTASP/OTAPA procedure window.
When the PRL Download macro is selected from the pull-down list, an Open PRL
button becomes active in the OTASP/OTAPA procedure window. If selected, this
button will open a dialog window where the operator can browse and select a
formatted PRL file. The contents of the selected PRL file will automatically populate
the OTASP/OTAPA procedure window. A pull-down list is used to select between the
IS-683-A, -B, or -C/D/E PRL formats.
Alternatively, the operator can manually enter or modify a PRL via the field displayed
in the OTASP/OTAPA procedure window. Clicking the Send OTASP/OTAPA button will
cause the PRL contents displayed in the OTASP/OTAPA procedure window to be sent
to the mobile station.
When the PRL Upload macro is selected from the pull-down list, clicking the Send
OTASP/OTAPA button will cause AirAccess to generate the series of commands
necessary to query the current PRL stored in the mobile station. After the query is
complete, the PRL retrieved from the mobile station will be displayed in the
OTASP/OTAPA procedure window. Clicking the Export PRL button will then give the
operator the ability to specify a filename and save the PRL contents to an file.
8. Using TAP Protocols
8.1. Overview
The Test Application Specification (TAS) for High Rate Packet Data Air Interface specifies
four independent protocols to conduct access terminal minimum performance tests in
laboratory environment. This specification also allows you to conduct measurements of
certain forward link and reverse link performance in a field environment.
AirAccess provides the ability to perform testing using all of the above six protocols.
To use these protocols, bind them to the stream you want to use, and initiate the TAP
calls. You can perform these operations using the I-APIs provided by AirAccess. For
further information about the I-APIs required for TAP testing, refer to the AirAccess I-API
Command Reference Manual delivered as part of the I-API SDK (Software Development
Kit) option.
9. Maintenance
The AirAccess C2K instruments (SR3452 V2, SR3462) contain no user-maintainable
components. Contact customer service at 732-544-8700 to arrange for maintenance or
repair of your equipment.
Fuses are installed at the factory to match the most commonly used line voltage in the
country of destination.
Using a small screwdriver, pry out the fuse holder using the notch at the top of the power
entry module.
Fuses are installed at the factory to match the most commonly used line voltage in the
country of destination.
Insert a small screwdriver in the slot under the door and gently rotate to unlatch the
door. When unlatched, raise the door.
Chapter Nine: Maintenance | 123
With the door in the raised position, apply the screwdriver to the slot in the end of the
fuse holder and gently push down to raise the fuse holder and remove it from the
housing.
Select the proper replacement fuse and place it in the fuse holder.
Le fusible d’origine est dimensionné selon le voltage le plus corant dans le pays de
destination.
10.1.Overview
The following specifications describe performance over the temperature range 0-40
degrees C, and include a 30 minute warm-up time from ambient conditions. All
specifications are measured at 892.7 MHz and 1962.5 MHz unless stated otherwise.
Supplemental characteristics provide useful information by giving performance
parameters not under warranty.
10.2.RF Generator
Pilot Relative Level: -63.0 to -0.1 dB (0.1 dB res)
OCNS Relative Level Range: Calculated automatically from the relative levels of
the other code channels to provide a composite power level that is equal to the
programmed sector power
CDMA Modulation
Modulation Type
The following additional RF Generator specifications are applicable when the SR3452 V2
is used for RF conversion:
Frequency
Amplitude
10.3.RF Receiver
The following specifications are applicable when the SR3452 V2 is used for RF
conversion.
Frequency
10.4.Timebase Specifications
Internal System Reference (sourced by SR3452 V2)
Frequency: 10 MHz
Stability
Output
Impedance/Coupling: 50 Ω/ AC
Level: 1 VPP
Frequency: 10 MHz
Input
Impedance/Coupling: 50 Ω/ AC
Level: 1 VPP
Chapter Ten: Technical Specifications | 129
10.5.Trigger/Clock/Sync Interfaces
CDMA Trigger Output (1X)
Level: LVTTL
Clocks (1X)
Level: LVTTL
Sync
Signals: PP2S Out (even-second pulse output), active-high, 100ns wide pulse
Level: LVTTL
130 | AirAccess C2K User Manual
10.6.General Specifications
SR3452 (V2)
Dimensions
Height: 5.20 inches (13.26 cm)
Width: 17.12 inches (43.38 cm)
Depth: 14.44 inches (36.68 cm)
Weight:With Internal RF option – 25 lbs (11 kg)
LAN Port: RJ-45 connector, 100 Base T Ethernet (for connection to System Controller PC
only) with TCP/IP support
Humidity: 10% to 90%, non-condensing
Power Supply
Voltage: 85-264 VAC (auto-sensing)
Frequency: 47-63 Hz
Power: 200 W (maximum)
Fuses: 2 x 2A, 250V slow-blow fuse
SR3462 (1xEV-DO)
Dimensions
Power Supply
The “CDMA TRIGGER OUT” DB-25 connector on the rear-panel of the SR3452 V2 is shown
in Figure 11-1. The following table contains the CDMA TRIGGER OUT pin assignments for
SR3452 V2.
Pin Signal
1 Chip Clock (1.2288 MHz)
2 2x Chip Clock
3 PP2S (Even-second pulse)
4 1.25ms frame boundary
5 20ms frame boundary
6 26.67ms frame boundary
7 80ms frame boundary
8 Channel 1 PN-I (I channel pseudorandom noise)
9 Channel 1 PN-Q (Q channel pseudorandom noise)
10 Channel 2 PN-I (I channel pseudorandom noise)
11 Channel 2 PN-Q (Q channel pseudorandom noise)
12 Reserved
13 Reserved
14 GND
15 GND
16 GND
17 GND
18 GND
19 GND
20 GND
21 GND
22 GND
23 GND
24 GND
25 Reserved
132 | AirAccess C2K User Manual
These outputs are at TTL level. Frame boundaries and PP2S are active-high, 50ns wide
pulses. Frame boundaries are aligned with the leading edge of PP2S.
Additional inputs and outputs are provided on the rear-panel of the SR3452 V2 via
female BNC connectors. These are provided for synchronization purposes. The outputs
are at TTL level.